Live data from Hacker News

1Password 8 will be subscription only and won’t support local vaults

1password.community

81–90 of 685 posts

Re: 1Password 8 will be subscription only and won’t support local vaults

#81
post #38

I honestly have 0 problems with this. They’ve gone over and beyond to support old licences far longer than it could be expected, and a password manager is the kind of sensitive and ubiquitous product for which SaS actually makes sense. Anyone remotely involved in anything similar knows it’s a PITA to keep up to date while keeping device compatibility, and the folks at 1P have been doing great work.

Actually a sensitive product is exactly where this does NOT make sense. No matter how good their security is with their cloud version it will still be less secure than having a vault locally on your disk. That is a fact.

Subscription services to me are only justified if they are providing a SERVICE which they are with the web version and ability to sync through their own servers, however, using a local version with your own vault can be done without any service at all.

So to me this looks like them intentionally crippling their own software in order to force people into paying a subscription fee that is not necessary. They already hide the ability to purchase a standalone license for 1Password 7 trying to get people to pay the subscriptions so this is the next logical step.

Re: 1Password 8 will be subscription only and won’t support local vaults

#82
post #3

I haven't had a single bad experience with Bitwarden. I even pay for it now and still run it locally just to support them. Highly recommended if you don't want to be forced into 1Password's service.

What's the main point of Bitwarden or competitors over traditional password managers such as KeePassXC? Better autofill features?

Re: 1Password 8 will be subscription only and won’t support local vaults

#84
post #5

Well darn, I guess I have to find a new password manager. 1Pass + Dropbox sync was so good.

KeePass + Dropbox works, and you can sync to Android from Dropbox with KeePass2Android.

The real advantage of KeePass(XC), at least for me, is that it can be used to store so much more than simply user/password.

I use it to securely store notes and important files.

Re: 1Password 8 will be subscription only and won’t support local vaults

#85

Anyone have good/bad experience moving from 1Password to Apple' iCloud Keychain? I've recently been using keychain for new accounts, but not sure I wanna bite the bullet and go all in - just need a nudge.

I've used iCloud Keychain for all my personal stuff since it existed. It's pretty bare-bones, but the built-in integration into Apple's software makes it a no-brainer for me. It's worked great!

Re: 1Password 8 will be subscription only and won’t support local vaults

#86

This makes sense to me. Lots of other products have head in the same direction over time (e.g. YNAB) for similar reasons. SaaS is familiar to consumers and ultimately a nicer business model for most products. If you support SaaS for new customers, maintaining the old product / pricing model indefinitely eventually stops making sense. At some point you have to make a move like this. It is probably particularly timely…

I will run the installed version of YNAB as long as it runs on my computer, and after that I'll probably run in in a virtual machine until the end of time. I am not comfortable with my financial information being on the cloud in the hands of a third party, much less so when it is not the likes of Google and Apple with armies of security engineers and can be hacked much more easily.

[deleted]

Re: 1Password 8 will be subscription only and won’t support local vaults

#87
post #70

Anyone have good/bad experience moving from 1Password to Apple' iCloud Keychain? I've recently been using keychain for new accounts, but not sure I wanna bite the bullet and go all in - just need a nudge.

I don't recommend Apple's keychain. It's smart enough to track usernames and passwords and feels very satisfying to use on an iPhone, but doesn't capture some other parts of authentication. This includes security questions, OTP, capturing notes around how sign-ins can be weird (HSAs and other portals rife with redirects), and non-iOS devices (as well as non-safari browsers). Bitwarden is fantastic. I pay for the OTP…

I use Apple keychain in conjunction with KeePassX. Apple keychain for the convenience, but KeePassX is the master storage.

Re: 1Password 8 will be subscription only and won’t support local vaults

#88

Earlier quoted context omitted.

I will run the installed version of YNAB as long as it runs on my computer, and after that I'll probably run in in a virtual machine until the end of time. I am not comfortable with my financial information being on the cloud in the hands of a third party, much less so when it is not the likes of Google and Apple with armies of security engineers and can be hacked much more easily.

Yeah I can totally understand that. I'm similar with the sync feature: the last thing I'm going to do is give them (or their 3rd party provider) my actual bank credentials. I would feel better if they supported some type of end-to-end encryption. I can also understand how, at least from a business perspective, most users probably don't care enough to not use it.

FWIW, YNAB never receives or touches your bank credentials — sign-in happens through MX and Plaid, which hands back a token to YNAB to use[1]. For banks that support it, the process goes through OAuth and you sign in directly with your bank, so even MX and Plaid never see your credentials. The whole process is end-to-end encrypted, with no credentials stored at rest (unless necessary on the MX/Plaid side, but they handle that).

Not trying to change your usage or habits, just wanted to clarify.

[1]: https://www.youneedabudget.com/security/#direct-import

Re: 1Password 8 will be subscription only and won’t support local vaults

#89

I use 1Password, and migrated over to their subscription service some time ago. A password manager seems like the best overall option at this time. However, given they have all the password for many people, how are they not one of the biggest targets in the world? In their old Dropbox model, I understood the security model. In the service model it's moved to "Just Trust Us". Is there anyone who can help me understand…

Err, have you checked with them?

https://support.1password.com/security-assessments/

They've gone pretty far above and beyond what we're used to seeing wrt sharing security details, audit results, and architecture information.

Re: 1Password 8 will be subscription only and won’t support local vaults

#90

I guess I’m the outlier in being very happy with 1Password and fine with paying for the subscription service. Not only is 1Password the best password manager I’ve used, but it makes it seamless to share stuff with my wife. I don’t care if 8 is an Electron app either, considering I usually interact with it via the browser anyway with their extension. (Also I know that the majority of what they wrote for it is Rust and…

$20/month seems a bit steep if you ask me. Otherwise I agree with everything you said.

edit: I misread and was looking at the business page. $4.99/month for family and $2.99/month for user is entirely reasonable!

Post reply on HN